Merge branch 'main' into dependabot/terraform/code/infra/azure/azapi-1.11.0

Author: marvinbuss

.github/dependabot.yml

@@ -24,6 +24,17 @@ updates:
       - "pip"
       - "dependencies"
 
+  # Maintain dependencies for pip
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "sunday"
+      time: "10:00"
+    labels:
+      - "pip"
+      - "dependencies"
+
   # Maintain dependencies for Terraform
   - package-ecosystem: "terraform"
     directory: "/code/infra"

.github/workflows/_containerTemplate.yml

@@ -1,4 +1,4 @@
-name: Docker Template
+name: Container Template
 
 on:
   workflow_call:
@@ -54,7 +54,7 @@ jobs:
 
       # Install cosign
       - name: Install cosign
-        uses: sigstore/cosign-installer@v3.2.0
+        uses: sigstore/cosign-installer@v3.3.0
         id: install_cosign
         if: github.event_name != 'pull_request'
         with:
@@ -83,7 +83,7 @@ jobs:
       # Extract Metadata (tags, labels)
       - name: Extract Metadata
         id: metadata
-        uses: docker/metadata-action@v5.0.0
+        uses: docker/metadata-action@v5.4.0
         with:
           context: workflow
           images: |
@@ -97,7 +97,7 @@ jobs:
       # Build and Push Docker Image with Buildx
       - name: Build and push Docker image
         id: build_push
-        uses: docker/build-push-action@v5.0.0
+        uses: docker/build-push-action@v5.1.0
         with:
           context: ${{ inputs.working_directory }}
           file: ${{ inputs.working_directory }}/Dockerfile
@@ -111,7 +111,7 @@ jobs:
       # This step uses the identity token to provision an ephemeral certificate against the sigstore community Fulcio instance.
       - name: Sign container image
         id: sign
-        if: ${{ github.event_name != 'pull_request' }}
+        if: github.event_name == 'release'
         run: |
           cosign sign --yes "${TAGS}@${DIGEST}"
         env:

.github/workflows/_functionAppDeployTemplate.yml

@@ -51,7 +51,7 @@ jobs:
       # Setup Python 3.10
       - name: Setup Python 3.10
         id: python_setup
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: ${{ inputs.python_version }}
           cache: "pip"

.github/workflows/_functionAppTestTemplate.yml

@@ -28,7 +28,7 @@ jobs:
       # Setup Python 3.10
       - name: Setup Python 3.10
         id: python_setup
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: ${{ inputs.python_version }}
           cache: "pip"